Privacy Policy
We respect your privacy and protect your data.
Last updated: —
Data We Collect
Account info, course progress, transactions, device and usage analytics. Contact form data is stored locally until integrated.
- Identity data: name, email, country/region.
- Educational data: enrolled courses, lessons completed, quiz scores.
- Transactional data: order IDs, timestamps, last 4 digits and tokenized identifiers (no full card data stored).
- Device/usage: IP (truncated/anonymized where possible), user agent, pages viewed, session duration.
- Support: messages you send us and related metadata.
How We Use Data
Provide access, personalize content, improve curriculum, and handle support. We do not sell personal data.
- Account provisioning and authentication.
- Course delivery, progress tracking, and certificates.
- Payment processing and invoicing.
- Analytics to improve lessons and site reliability (subject to consent).
- Security, fraud prevention, and compliance with legal obligations.
Legal Basis
We rely on contract necessity (to deliver courses), consent (for non-essential cookies/analytics), legitimate interests (to maintain and improve services), and legal obligation (record-keeping, tax).
Data Retention
We retain your data only as long as necessary for the purposes above. Typical periods:
- Account data: for the lifetime of your account.
- Course records: up to 5 years after last activity for accreditation and proof of completion.
- Transactions: 7–10 years for tax and accounting.
- Support tickets: up to 24 months.
- Analytics: 12–26 months, or immediately upon consent withdrawal where feasible.
Security
We apply encryption in transit, access controls, and minimize data retention.
- Encryption in transit (HTTPS/TLS).
- Principle of least privilege and audited access.
- Backups with limited retention and encrypted storage.
- Vulnerability management and patching cadence.
Your Rights
You can request access, correction, deletion, and export of your data. Contact: [email protected]
- Access and portability: get a copy of your data.
- Rectification: fix inaccurate details.
- Erasure: delete data where applicable.
- Restriction/objection: limit or object to certain processing.
- Withdraw consent: for analytics/marketing at any time.
- Do Not Sell or Share (where applicable).
Submit a Data Request
Use the form below to submit a privacy request. We will respond within applicable legal timeframes.
International Transfers
Where data is processed outside your jurisdiction, we rely on appropriate safeguards such as Standard Contractual Clauses, data processing agreements, and risk assessments.
Children’s Privacy
Our services are not directed to children under 13 (or as defined by local law). We do not knowingly collect children’s personal data. If you believe a child has provided us data, contact us to remove it.
Indexing: gentleriver.click